Privacy & your data

Your puzzles stay on your device

Your puzzle progress, stamps, stars, boosts and preferences are saved in this browser. Creating an account does not currently sync those puzzle saves between devices. Private browsing or clearing browser data can remove them.

You can download or restore a progress backup in Help & saved progress. Keep downloaded backups somewhere you trust.

Optional sign-in

When a sign-in method is available, choosing it lets us recognize your player profile. Google may provide basic identity information, including an account identifier, name, email address and picture, in its sign-in response. We use the account identifier to authenticate you; we do not save your Google name, email address or picture in your player profile. We do not request access to your Gmail, Drive or contacts.

Facebook sign-in requests basic public-profile access. We use your app-specific Facebook identifier to recognize your profile; we do not request your Facebook email or save your social name or picture. Social sign-in information is used for authentication, not advertising or newsletter enrollment. We do not sell or share it with advertisers.

If email-code sign-in is offered, your email address is sent to our transactional email service, Resend, to deliver the code you request. Our account database stores a fingerprint of that address rather than the address itself. Codes expire after 10 minutes and have limited attempts. Email-code delivery is separate from any newsletter subscription.

We store your sign-in identifier, chosen player alias and mark, account creation time, public-board choice and session records. A necessary secure cookie keeps you signed in while you return within 30 days. After 30 days without activity, sign in again. Signing out immediately ends the session in that browser.

The optional weekly board

Joining the public board is your choice. If you join, your chosen alias, mark and weekly score are visible to other visitors. Your sign-in identifier is never shown publicly.

When you finish an eligible puzzle, its completed board is sent to our server to check your point. We do not save those answers as a score record. We save the puzzle, date, game and completion time. Weekly scores reset each week; old score records are removed as new scoring activity arrives. Temporary scoring attempts expire after 24 hours. Leaving the board hides your row and pauses scoring.

Optional statistics and feedback

Play statistics start on for visitors in the United States unless you have already declined or your browser sends a privacy signal. Outside the United States, or when your location is unknown, they stay off until you choose to share. We use the country supplied by our hosting provider to set this default. When enabled, we collect game starts, finishes, rewards, approximate active time, sharing and email-invitation actions, and errors using random browser and session identifiers. These statistics do not include your answers, name or email. Reports cover 30 days; older events are removed as new activity arrives. A temporary, rotating network-address fingerprint limits abuse; raw IP addresses are not saved in our statistics database.

You can change this choice or delete your play statistics in Play statistics settings. Browser Do Not Track and Global Privacy Control signals keep optional play statistics off.

If you submit feedback, we send your description, puzzle and page information to our private GitHub issue tracker so we can investigate. Please do not include passwords or sensitive personal information. Feedback is separate from your player profile and is not removed by deleting that profile; contact us if you need a feedback submission removed.

Email invitations and advertising

Signing in or joining the weekly board does not subscribe you to email. Newsletter invitations offer a separate choice. The visible checkbox is initially selected for visits Cloudflare identifies as coming from the United States; other and unknown locations start unchecked. You can change that choice, and a decline is remembered on this device. When you choose to subscribe, your email address and daily or weekly preference are sent directly to Kit, our email delivery provider. Kit sends a confirmation email; your subscription is activated only after you confirm. Kit processes subscription, delivery and unsubscribe information to operate the list. Every puzzle email includes an unsubscribe link. We do not put your email address in browser storage or play statistics. Read the Kit privacy policy.

We use Google AdSense to support free puzzles. Ad delivery depends on Google's approval and available ads. Google may process your IP address, browser and device information, page activity, and cookies to deliver, measure, and protect advertising. Its consent message offers choices where required, including declining personalized advertising. You can manage Google's advertising preferences at My Ad Center and read how Google uses information from partner sites. Optional rewarded video grants help only after a completed view; skipping an unavailable or dismissed video does not spend saved boosts. Google Analytics and Meta advertising measurement are available through separate, optional Cookie choices. Both start off and respect browser Do Not Track and Global Privacy Control signals. If you enable Google Analytics, Google receives visits, puzzle activity, campaign labels, browser/device information and cookies. If you enable Meta advertising measurement, Meta receives visits, puzzle starts and finishes, browser/device and network information, and identifiers; Meta may associate this activity with your Meta account. We do not send puzzle answers, names, email addresses or sign-in identifiers in these measurement events. You can turn either choice off using Cookie choices in the footer. This stops future optional measurement but does not delete information already received by the provider.

Services and retention

Cloudflare hosts the website and account database and processes the network requests needed to operate and protect them. Google and Meta process requests when you choose their sign-in methods under their own privacy policies. Resend is used only when email-code delivery is available; GitHub receives feedback you choose to send.

Your player profile remains until you delete it. Expired sign-in challenges and sessions are removed as sign-in activity arrives. Browser saves remain on your device until you clear them. Infrastructure providers may retain their own operational logs and backups under their policies.

Cloudflare privacy · Google privacy · Meta privacy · Resend privacy · GitHub privacy

Delete your account or data

1. Open Passport and sign in using the same method you used to create your profile.
2. Choose Edit profile → Account choices → Delete my player profile and confirm the deletion.

This removes your player profile, weekly scores, scoring attempts and active sessions. It does not delete the puzzle saves stored in your browser. You can separately remove those using your browser’s site-data controls; download a backup first if you want to keep them.

If you cannot sign in, or a profile option is unavailable, email privacy@sundayanyday.com with the subject “Data request.” Tell us which sign-in method you used and your player alias, if known. We may need to verify that the account is yours before changing or deleting it. Never send a password or sign-in code.

You can also remove Sunday Anyday’s access in your Google or Facebook account settings. Removing provider access alone does not delete your Sunday Anyday profile; use the steps above or contact us.